Don't be an Idiot like me, take action now!

[@haonnoah]

I'd also reccomened setting up internal DNS (split horrizon DNS) to prevent hairpinning, so even if the external DNS record is incorrect, the traffic should directly to your NPM instance or what is accepting the traffic.

[@AwesomeOpenSource]

That's a great suggestion.

[@abowers]

Really awesome videos! Love your channel. You make a bunch of content I never heard of so very great to see content like this over the normal docker containers and environments I'm normal to use to seeing.

[@AwesomeOpenSource]

Thanks for the kind words. I'm always looking for new things to try, and to learn.

[@leeh.1900]

It's Always DNS :)

[@AwesomeOpenSource]

Feels like it for sure.

[@evanfleak2737]

Say the haiku. It's not DNS. There's no way it's DNS. It was DNS.

[@BPL-Whipster]

Or a certificate

[@shotelco]

I think most of us subscribers are tech DIY'ers, and can empathize with an "outage event" such as what you described. You mentioned my personal _Trigger:_ *Documentation!* IMO, proper documentation of an adhoc system (opensource based environments are all adhoc) should include a graphic diagram of every component within the system, a 5th-grade level Re-installation manual detailing every step to recover the system, and some method to remind us to update this documentation EVERYTIME we touch (make any changes - regardless of how seemingly insignificant) the system. Failover/Redundancy devices for critical components should also be considered. Is there any opensource application you can recommend that addresses Documentation?

[@AwesomeOpenSource]

I love this, and I have almost all of this now, but I was having a hard time finding my 8-port diagram, and I don't have the dang cable tags...but adding them now.

[@Unselfless]

Netbox may be a bit overkill for homelab documentation, but it's FOSS (though there is a paid version) and is pretty great

[@mt_kegan512]

Bookstack is nice

[@IntelBrow]

Netbox might help. Overkill, but might help.

[@lifefromscratch2818]

This is great! Definitely gonna have a think about this. Also, I heard "Digital lotion" and got a giggle.

[@AwesomeOpenSource]

That may have to be the new name of my solutions - Digital Lotion, for all the time closed source has burned you.

[@suntoryjim]

My DR testing consists of 2 home routers of identical make/model, identically configured and rotated-out on a monthly basis. I've been following this practice with 2 x N100 mini PCs running OPNSense ever since the lockdowns. In addition to network documentation and cable labels, I also routinely download and save the config files for all my switches and WAPs.

[@AwesomeOpenSource]

Sounds like a good plan. It's worth the effort.

[@EdVeal]

I would be interested in what information you document. I try to but have been inconsistent with the information I document.

[@AwesomeOpenSource]

I am currently reworking my network layout diagram. Literally creating images for each network device, and wall plate, naming the ports, and drawing arrows for where they lead. I"m working to "simplify" things a bit. But also to make sure I can easily find it and reference it whenever I need it in the future. I also ocument how I created various things in whatever software I'm using. This often turns into the basis of my show notes for various tools I do videos on as well.

[@terrorpup]

Dude from one home labber to another, it happens. At least you are back up and you learn it from it.

[@AwesomeOpenSource]

Yeah, that's what we do, right? Make mistakes and move on.

[@ghangj]

Thanks for the video, i love these types of videos where you explain your troubles and solutions to it. i had this same issue where my network caused my homelab to be a shit show. Took my time setting up my network and now i am glad i did that.

[@AwesomeOpenSource]

That's awesome. it's a hard way to work through it, but it pays off in the end for sure.

[@myhometvaccount9365]

after going through this stress once, said never again :) after that i purchased two old £75 used business pc's, a $15 intel dual pcie nic card, and put proxmox on both i then put the nic into one of them, virtualized pfsense onto it (could do virtualized openwrt too i suppose) and used it as my main router the pfsense vm gets backed nighty to a network share, and the second proxmox pc has access to this share as well main ones dies/corrupts .... take's only min's to swap over the nic, restore the last pfsense vm backup, swap over the cables, and your done, happy days are here again :) works a treat for homelab setups ps i fire up the spare proxmox now and again to make sure both are at the same update level

[@AwesomeOpenSource]

I thought about doing this again, but I know last time I ran a virtual appliance for networking the bad part was having to reboot the host for security updates. Other than that it was not a bad solution.

[@myhometvaccount9365]

@@AwesomeOpenSource personally the downtimes never bothered me, especially if you do it late at night, its usually quite quick with just one vm running thinking now .... if i was to purchase another intel nic, would be easy to fire up the other pfsesne vm, move over the netwrok cables and use that if anything went badly wrong during the reboot i never pass through the nics and both pfsense vm's are set to the same mac address's, so would be seemless to the rest of the network (above procedure would be good for when you do a major proxmox update (v8 to v9 say) where you have to shutdown the vm's first and it takes a long while)

[@sirrobertdowneysenior8080]

Greetings new editor, Plz keep this gentleman on toes has tendency to get carried away in Zen 🙈.

[@AwesomeOpenSource]

Indeed I do. She's knocking out edits like crazy, so now I"m not behind on recording, but definitely behind on final review.

[@sirrobertdowneysenior8080]

@AwesomeOpenSource Wish you the best Chief. New generation never fails to amaze us.

[@BladeWDR]

It's probably a dynamic IP anyway, but FYI you have an actual public IP showing 11:40 ish or so.

[@AwesomeOpenSource]

It is indeed dynamic. No worries.

[@PeterBatah]

All the best to you and yours in 2025. Looking forward to another 12 months of awesome content

[@stephanfuchs5691]

Thx for the great video & sharing your passion for cool Open Source software with us :-) You should upgrade your Netbird management instance. Network routes are deprecated now & you should use Networks instead :-)

[@AwesomeOpenSource]

Just upgraded, now I need to figure out how Networks are different from Network Routes.

[@stephanfuchs5691]

@ Routes will be gone in the near future. Networks are configuration containers which incorporate the whole aspect of networking inside NetBird. You define routing peers, which will provide the routes to connected peers. And you define the access rules which peers are allowed to reach which resource in the underlying network. All that aspects are now bound to networks and that makes managing your NetBird setup more logical and handsome I.m.h.o

[@summoner2100]

Is the original netbird ingress on the lan? on your home network?

[@AwesomeOpenSource]

Inside my LAN, not on the edge router.

[@z1g]

I knew once you said the Wallmart routers didn't support OpenWRT that they were TP-Links. I know they are cheap, but I wish people would stop buying them.

[@l0gic23]

Might change... People talking about a possible ban of those routers.

[@AwesomeOpenSource]

Yeah, but it was cheap...essentially something to sit on the shelf until I get my new router in a few more days. I like TP-link. never had an issue with them really. But I run OpenWRT on them...so not the same situatioin.

[@olafgusten2671]

that bad luck as walmart near me for the last month switched most of his router to the last tplink including the be9300 and some netgear.

[@AwesomeOpenSource]

Yeah, it's just not a great choice there. Luckily I got my new Zyxel GS1900-8 in, so getting OpenWRT on it, then will start moving it from switch to Router.

[@micky1067]

I've been watching your videos for a long time. I'm amazed at what you've already achieved. Keep up the good work. I'd be interested to know how your network is set up. And what about the traffic, which will probably run via the external server, right? By the way, which TP-Link router are you using? I have the ER605 and have flashed OpenWRT there. Oh what do you think about headscale instead about netbird ? Greetings from Germany.

[@AwesomeOpenSource]

I was using an HP X86_64 machine with a 4-port gigabit nic. I have an ER605 and was looking at the flashing instructions today, but it makes me a bit nervous. How easy was it to flash DD-WRT to it? That said, my network has 4 VLANs, I used the HP router as the main router, with 3 TP-link EAP615 Wall plates for wifi on the various VLANs around my home. I do access my services (now) through the nginx-proxy-manager routed through Netbird to my internal LAN. I prefer Netbird because of the routing power it gives over Headscale. Headscale was great, but lacked the routing and ACL stuff I needed.

[@micky1067]

@@AwesomeOpenSource Hi Brian, thanks for sharing your infrastructure. I'll give netbird a try. Sounds very interesting. What is the point of installing openwrt on the eap614 ? I was also a bit nervous about flashing my er605. It is important to have a backup of the original firmware. It is best to use a ttl converter and connect the pins on the board accordingly and solder in the plug-in posts. Best regards from Germany, Michael

[@l0gic23]

Any chance a poe wire got plugged into the wrong port?

[@AwesomeOpenSource]

Highly likely.

[@BenSmithuk]

I used wireguard install script on a vps to avoid overcomplicating everything and connecting my homelab up to instances on my proxmox then the vps acts as the front door. Works a dream and 0 costs.

[@AwesomeOpenSource]

That's awesome!

[@Sapious1]

Excellent video, appreciate the transparency.

[@AwesomeOpenSource]

It's important to share when we succeed, but moreso when we fail,a nd how we overcome it.

[@TechnologyGeek862]

If I ever want to have public facing stuff from my own network I'd probably do it similar way but for the moment I just want to keep my LAN ja public network away from each other and just VPN in using netbird or similar. I have also other ways to get in if first option fails though.

[@AwesomeOpenSource]

totally understand that. And nothing wrong with it.

[@rschmidt563]

Could you please do a follow up on how to properly document your network?

[@AwesomeOpenSource]

I'll do one for sure. Working through improvements to my process now.

[@MaxiKaos]

Maybe you could use duckDNS as an open source dynamic dns solution to work around the changing public IP issue.

[@AwesomeOpenSource]

I could indeed. i just found that I like control over everything, and that's my downfall in some cases.

[@ClayBellBrews]

Yeah, I think I’m just gonna bite the bullet and go netbird, thanks for the push :)

[@AwesomeOpenSource]

Hope it all goes well.

[@Mikesco3]

I'm actually using Netbird successfully at a fairly complex setup for a client... I only have to enter some of the Netbird IP's in the hosts file in some of the windows computers,

[@AwesomeOpenSource]

It's really a fantastic tool. Super glad they made it open source!

[@clomok]

haha Tis the season I guess. My homelab did the same thing to me last week. I spent that same half a day chasing my tail 😆😆

[@AwesomeOpenSource]

So sorry you had to go through it, but it is the life of the homelabber I suppose.

[@clomok]

@AwesomeOpenSource I wouldn't change it. That's how I learn the most when I'm in fight or flight mode with my homelab

[@rajgihanify]

Happy new year to you 🎉 your content is always appreciated and amazing.

[@AwesomeOpenSource]

Thank you so much!

[@Melendawr]

Yeah I know how it feels, man Good advice, thanks for sharing HNY by the way

[@AwesomeOpenSource]

Happy new year!

[@AwesomeOpenSource]

Thank you so much!

[@brennonoverton8277]

Damn, I use netbird as well but I never thought about having my reverse proxy point to netbird. I may have to change up my network

[@AwesomeOpenSource]

It's been totally worth it. Working great!

[@neoflix59]

Your awesome. Love learning new things and ideas

[@AwesomeOpenSource]

Thank you! Cheers!

[@JeffreyBodenstein]

Why would you purchase a consumer grade POS? Never long security updates, poor security, and limited on speed due to cheap chips.

[@AwesomeOpenSource]

Needed a solution quickly just to have internet up and running. Have a much better one ordered and on the way, but still a few days before it arrives. My family won't go without internet for a week or more...and they would likely kill me.

[@mikedoth]

What about Netmaker? I thought you liked and used that.

[@AwesomeOpenSource]

Netmaker is another really awesome project. I used it for quite a while, and had a lot setup on it. I just found Netbird to suit my needs better for my use cases. I still think Netmaker is a fantastic product.

[@alexanderg9106]

Netbird in two virtual servers at two different noc vendor as access in ha setup

[@AwesomeOpenSource]

Sounds like an awesomely solid setup!

[@sociabilis]

Hi I don't know how DM you, but your vaultwarden key leaked in the vidéo. You should replace it quickly.

[@AwesomeOpenSource]

You can send me a message on matrix @mickintx:discuss.opensourceisawesome.com, but I'm not seeing this anywhere. Can you just point to a timestamp?

[@sociabilis]

@@AwesomeOpenSource I don't have matrix. But your key is in your paste tool (kzbin.info/www/bejne/fHnMnKhogdlmrpo)

[@AwesomeOpenSource]

Ah yes, that's the key for the system, but it was a one time use key, so it's ok. But thanks for the heads up. I always appreciate it.

[@darukutsu]

opnsense on old computer with wifi pcie card

[@AwesomeOpenSource]

That's essentially what I had, except I was running OpenWRT.

[@Duurzaamheid]

First ! Happy and Healty 2025

[@AwesomeOpenSource]

Thank you, you too.

[@rajilsaraswat9763]

If VPS gets compromised will that be security threat to your network netwok?

[@AwesomeOpenSource]

Yes, indded it would. So you want to setup your VPS system with the same security as you would any system running on the open internet. - Firewall Up - Ports closed if not needed - Strong passwords when needed - 2FA wherever possible - Encryption everywhere. - SSH access through keys only. - as many other tools as you can use to secure your systems and services without keeping yourself from accessing them.

[@DanielTekmyster]

Meh